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IN THE CLAIMS 

This is a complete and current listing of the claims, marked with status 
identifiers in parentheses. The following listing of claims will replace all prior 
versions and listings of claims in the application. 

1. (Currently Amended) Conditional access data decryption system, this 
system comprising: 

• a diffusion centre-(4©} arranged to diffuse data encrypted by at least one 
control word {sw>, 

• at least one management centre-f44) arranged to diffuse personal messages 
(ECM, EMM) related to the management of access means to encrypted data, 

• an operating device {4£Hntended to render usable said encrypted data, and 
♦a decoder (43)-arranged to decrypt at least one part of the encrypted data, 

placed between the diffusion centre (+0>-and the operating device-f^2), 
and comprising 
characterized in that 

• tho docodor (13) compr i ses a module fW)-for the reception and decryption 
of encrypted data a and 

— a module {45Mor the management of access rights to this data, these 
modules being physically different, the reception module {44V- being 
connected to the operating device {4^-and the management module 14-5} 
being arranged to communicate with the reception module. 

♦the management module (15) includos including a security module £46) 
comprising a unique identification number (UA) and data allowing securing 
the connection between said management centre (11) and the security 
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module-4+S), tfr*s -the security module being arranged to verify the content 

of the personal messages (ECM, EMM) _ and to allow or prevent the 

decryption of the control-word(s) <ew)-according to the content of the 

personal messages, wherein 

• and in that the reception module (1 4 ) receives the encrypted data 

originating from the diffusion centre (4©)-via a first communication line, and 

the management module (15) receives the personal messages (ECM, 

SVH\4)-through the management centre £44-}-via a second communication 

line , and wherein the management module comprises data pertaining to 

the management centres with which these modules are authorized to 

communicate . 

2. (Currently Amended) Data decryption system according to claim 1, 
character i z e d i n that wherein the communication between the reception module (44) 
and the management module fl-§)-is a communication by m e ans of waves. 

3. (Currently Amended) Data decryption system according to claim 1, 
charactorizod in tha t wherein the rights management module (15) is a mobile 
telephone. 

4. (Currently Amended) Data decryption system according to claim 3, 
charactor i zod i n that wherein the security module {46}-includes identification functions 
necessary for telephony and at least one storage area pertaining to a management 
centre (11) , this area comprising the security parameters for reception of the 
authorization messages (EMM) of said management centre. 
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5. (Currently Amended) System* according to claims 14o^, charactor i zod i n 
tha twherein - the diffusion centre (10) is arranged to diffuse control messages (ECM) 
comprising the control-word(s)-(Gw>, and in that wherein the personal messages 
broadcasted by the management centre (11) correspond to an authorization 
message (EMM) . 

6. (Currently Amended) System according to claims 1 to 4, 

wherein character i zod in that the management centre (11) is arranged to diffuse 
personal messages comprising the control-word(sHGw), the security module £4-6}-of 
the management module £^§}-having means te-for determininge if this- the message 
is intended for said security module and means te -for transmi tting ifris -the control 
word-(Gw> to the reception module-{+4}. 

7. (Currently Amended) System according to claim 6, 
wherein charact e r i z e d i n that the reception and decryption module (1 4 ) includes a 
unique decryption key applied to the control word (cw), tfns -the key serving to 
encrypt the control-words at the management centre (11) before their transmission 
towards the management modul o (15) . 

8. (Currently Amended) Data decryption system according to claim 1, 
including at least two management centres (11) , wherein charact e r i z e d i n that the 
security module {+6}-of the managing module fl-SHncludes security parameters for 
the reception of the authorization messages (EMM) originating from different 
management centres-£44->. 
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9. (Currently Amended) Data decryption system according to claims 14e-8, 
the diffusion centre (10) being arranged to transmit descriptive information of the 
encrypted data, wherein oharaotor i zod i n that tWs -the data contains indications 
necessary for the establishment of communication with the management centre {44} 
that is responsible for the authorization of this -the data, and is transmitted to the 
management module (15) , the latter being arranged to establish communication with 
the management centre (44^-in question to obtain the authorization message (EMM) . 

10. (Currently Amended) Data decryption system according to ono of tho 
prev i ous c l a i ms claim 1 , wherein charact e r i zed i n that the reception and decryption 
module (44)-is integrated into the operating device-£42). 

11. (Currently Amended) Data decryption system according to claim 1, 
wherein oharaoter i zod i n that the reception and decryption module (1 4 ) includes 
standardized communication means with the management module , for permitting 
interaction between (15) so that a reception and decryption module (1 4 ) can interact 
wit frand a plurality of management modules-(4§}. 

12. (Currently Amended) Data decryption system according to ono of th o 
prov i ouc c l a i mG claim 1 , wherein ch a raGt e r i z e d i n that the management module (+5) 
includes means to -for establishing a matching key with the reception module (14) , 
tois -the key being intended to encrypt and decrypt at least the control-word(sHew) 
transmitted to the management modul o (15) towards the reception module-(44). 
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13. (New) System according to claim 2, wherein the diffusion centre is arranged 
to diffuse control messages comprising the control-word(s), and wherein the 
personal messages broadcasted by the management centre correspond to an 
authorization message. 

14. (New) System according to claim 2, wherein the management centre is 
arranged to diffuse personal messages comprising the control-word(s), the security 
module of the management module having means for determining if the message is 
intended for said security module and means for transmitting the control word to the 
reception module. 

15. (New) System according to claim 3, wherein the diffusion centre is arranged 
to diffuse control messages comprising the control-word(s), and wherein the 
personal messages broadcasted by the management centre correspond to an 
authorization message. 

16. (New) System according to claim 3, wherein the management centre is 
arranged to diffuse personal messages comprising the control-word(s), the security 
module of the management module having means for determining if the message is 
intended for said security module and means for transmitting the control word to the 
reception module. 

17. (New) System according to claim 4, wherein the diffusion centre is arranged 
to diffuse control messages comprising the control-word(s), and wherein the 
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personal messages broadcasted . by the management centre correspond to an 

authorization message. 

18. (New) System according to claim 4, wherein the management centre is 
arranged to diffuse personal messages comprising the control-word(s), the security 
module of the management module having means for determining if the message is 
intended for said security module and means for transmitting the control word to the 
reception module. 

19. (New) Data decryption system according to claim 2, wherein the reception 
and decryption module is integrated into the operating device. 

20. (New) Data decryption system according to claim 2, wherein the management 
module includes means for establishing a matching key with the reception module, 
the key being intended to encrypt and decrypt at least the control-word(s) transmitted 
to the management module towards the reception module. 
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